default.rb

# Encoding: UTF-8
# Cookbook Name::logstash-wolfe
# Attribute:: default
#
node.override[:logstash][:server][:inputs] = [
                               :file => {
              :path => [
                "/var/log/*.log"
              ],
              :tags => [
                "rails"
              ],
              :exclude => "*.gz"
            }
          ]
node.override[:logstash][:server][:filters] = [
            :grok => {
              :patterns_dir => "./patterns",
              :match => {
                "message" => "%{TIMESTAMP_ISO8601:tstamp}%{SPACE}%{NUMBER:thnum}%{SPACE}%{LOGLEVEL}.*\[%{CORRELATION_ID},%{USER_NAME},%{TENANT_KEY},%{DEVICE_ID},%{SESSION_ID}\]\s*(Parameters:)\s*%{GREEDYDATA:rubyparams}"
              }
            },
            'if "_grokparsefailure" in [tags]' => {
              :drop => { }
            },
            :ruby => {
              :code => 'event["params"] = eval(event["rubyparams"])',
              :remove_field => [ "message", "rubyparams" ]
            }
          ]
node.override[:logstash][:server][:outputs] = [
            :wolfe => {
              :access_token_url => "https://api.safa.com/oauth/access",
              :consumer_secret => "asdsdfasdf",
              :consumer_key => "84fab0a2-80b3-asfd-9e5a-20213a1bed79",
              :collector_url => "https://api.data-asdfasd.asfd.com/",
              :log_level => "INFO",
              :upload_batch_size => 100,
              :upload_wait_timeout => 5
            }
          ]